huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.86.76.222 Ukraine · Mulgin Alexander Sergeevich | exposed-secret | NET | 1 | 2026-10-02 |
| 51.77.107.128 United Kingdom · OVH SAS | files | INFO | 1 | 2026-10-02 |
| 45.128.118.28 Romania · TIPZOR MEDIA SRL | exposed-secret | NET | 1 | 2026-10-02 |
| 51.222.88.248 Canada · OVH SAS | exposed-secret | COM | 1 | 2026-10-02 |
| 51.222.88.251 Canada · OVH SAS | files | COM | 1 | 2026-10-02 |
| 51.222.88.0 Canada · OVH SAS | exposed-secret | COM | 1 | 2026-10-02 |
| 51.222.135.75 Canada · OVH SAS | exposed-secret | COM | 1 | 2026-10-02 |
| 144.217.182.45 Canada · OVH SAS | files | WEBSIT | 1 | 2026-10-02 |
| 109.75.162.3 United Kingdom · IOMART HOSTING LIMITED | files | ORG | 1 | 2026-10-02 |
| 81.7.11.10 Germany · ISPpro Internet KG | exploit | NET | 1 | 2026-10-02 |
| 37.157.255.190 Germany · WIIT AG | exploit exposed-secret | COM, MY, NET | 3 | 2026-10-02 |
| 51.195.13.136 The Netherlands · OVH SAS | files | COM | 1 | 2026-10-02 |
| 172.232.84.125 India · Akamai Technologies, Inc. | exposed-secret | NET | 1 | 2026-10-02 |
| 83.149.101.75 The Netherlands · LeaseWeb Netherlands B.V. | files | COM | 1 | 2026-10-02 |
| 85.121.55.178 Romania · M247 Europe SRL | files | COM | 1 | 2026-10-02 |
| 95.154.197.170 United Kingdom · IOMART CLOUD SERVICES LIMITED | files | UK | 1 | 2026-10-02 |
| 80.209.230.99 Lithuania · UAB "Interneto vizija" | exposed-secret | NET | 1 | 2026-10-02 |
| 158.174.210.20 Sweden · Bahnhof AB | files | NET | 1 | 2026-10-02 |
| 185.170.208.15 The Netherlands · Starry Network Limited | exposed-secret | NET | 1 | 2026-10-02 |
| 185.170.208.40 The Netherlands · Starry Network Limited | exposed-secret | COM | 1 | 2026-10-02 |
| 85.121.245.145 Romania · M247 Europe SRL | exposed-secret | COM | 3 | 2026-10-02 |
| 5.175.234.181 United States · AceRDP Ltd | files | COM | 1 | 2026-10-02 |
| 172.67.151.239 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-02 |
| 91.191.210.110 United States · HIVELOCITY, Inc. | files | INFO | 1 | 2026-10-02 |
| 104.21.12.85 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-02 |
| 185.5.52.223 Lithuania · UAB "Interneto vizija" | exploit | COM | 1 | 2026-10-02 |
| 166.1.80.161 United States · 2E TELEKOMUNIKASYON LTD STI | exploit | MY | 1 | 2026-10-02 |
| 212.83.144.78 France · Scaleway SAS | exposed-secret | COM | 2 | 2026-10-02 |
| 172.86.94.175 United States · aurologic GmbH | c2 | COM | 3 | 2026-10-02 |
| 168.100.10.222 United States · BL Networks | c2 | COM | 3 | 2026-10-02 |
| 8.142.178.141 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 8.141.100.166 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 8.138.81.114 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 8.131.64.98 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | JSON | 1 | 2026-10-02 |
| 135.148.3.48 United States · OVH SAS | exposed-secret | NET | 1 | 2026-10-02 |
| 23.26.4.86 United States · Raff Technologies LLC | exploit | COM | 1 | 2026-10-02 |
| 95.211.162.136 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret | ME | 1 | 2026-10-02 |
| 179.43.169.32 Panama · Private Layer INC | exposed-secret | ORG | 1 | 2026-10-02 |
| 103.204.173.20 Singapore · Starry Network Limited | exposed-secret | NET | 1 | 2026-10-02 |
| 185.170.208.18 The Netherlands · Starry Network Limited | files | INFO | 1 | 2026-10-02 |
| 23.82.76.190 United States · Leaseweb USA, Inc. | exposed-secret | COM | 1 | 2026-10-02 |
| 103.190.93.251 India · BHARAT DATACENTER | exploit | COM | 1 | 2026-10-02 |
| 85.121.48.248 Romania · M247 Europe SRL | files | COM | 1 | 2026-10-02 |
| 165.22.120.234 United Kingdom · DigitalOcean, LLC | c2 exploit exposed-secret | TXT | 1 | 2026-10-02 |
| 5.175.136.139 Turkey · Yigit Hosting Bilisim E-Ticaret Gida Sanayi Ticaret Limited Sirketi | exposed-secret | PHP, BAT, DISABL, ENV | 55 | 2026-10-02 |
| 5.11.188.218 Turkey · TURKCELL ILETISIM HIZMETLERI A.S. | files | BIN | 1 | 2026-10-02 |
| 5.11.157.98 Turkey · TURKCELL ILETISIM HIZMETLERI A.S. | files | BIN | 1 | 2026-10-02 |
| 137.131.40.164 United States · Oracle Corporation | files | COM | 1 | 2026-10-02 |
| 2.180.35.173 Iran · Iran Telecommunication Company PJS | exposed-secret | TXT | 1 | 2026-10-02 |
| 52.18.157.55 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free